So someone adds a gateway to a fence but forgets to add the gate. That's not "introducing capabilities that the auth model wasn't designed to govern". > The fi

So someone adds a gateway to a fence but forgets to add the gate. That's not "introducing capabilities that the auth model wasn't designed to govern". > The fix isn't just "secure your APIs" (though yes, do that). It's recognizing that autonomous agents need different authorization primitives than human-operated systems. An API is for programs, not humans. And isn't suddenly insecure because some of those programs are now purportedly intelligent. I will agree though this is going to happen repeatedly. But only because the companies thinking rushing to bolt on "AI" is a good idea are more than averagely likely ones who thought proper API security wasn't.